AWS CERTIFIED CLOUD PRACTITIONER (CLF-C02) 2026
UPDATE: COMPLETE 200-QUESTION EXAM BANK
COVERING EVERY TESTED DOMAIN – INCLUDES
VERIFIED ANSWERS, RANDOMIZED ABCD
DISTRIBUTIONS, AND IN-DEPTH RATIONALES FOR
COMPUTE, STORAGE, NETWORKING, SECURITY, IAM,
BILLING, AND GLOBAL INFRASTRUCTURE.
1. Under the AWS Shared Responsibility Model, which of the following
is a responsibility of the customer?
A. Patching the operating system of an Amazon RDS database instance
B. Securing the physical infrastructure of AWS data centers
C. Managing the underlying hypervisor for Amazon EC2
D. Maintaining network cabling in AWS availability zones
Correct Answer: A
Rationale: The customer is responsible for security "in" the cloud,
including patching the guest OS on EC2 and managing database
schemas, but for RDS, AWS manages the underlying OS and
infrastructure.
2. Which AWS service provides a fully managed, petabyte-scale data
warehouse that allows users to run complex analytical queries?
A. Amazon DynamoDB
B. Amazon Redshift
C. Amazon RDS
D. Amazon Aurora
,Correct Answer: B
Rationale: Amazon Redshift is a fast, fully managed data warehouse
that makes it simple and cost-effective to analyze all your data using
standard SQL and existing ETL, business intelligence, and reporting
tools.
3. Which of the following is a key feature of Amazon S3 that ensures
high durability of stored objects?
A. Automatic cross-region replication
B. Versioning
C. Automatic data replication across multiple Availability Zones
D. Lifecycle policies
Correct Answer: C
Rationale: S3 Standard and S3 Standard-IA automatically store data
redundantly across a minimum of three physically separated Availability
Zones to provide 99.999999999% durability.
4. A company wants to ensure that its AWS resources are always
launched in compliance with company policies (e.g., using only
specific instance types). Which service should they use?
A. AWS Config
B. AWS CloudTrail
C. AWS Service Catalog
D. AWS Trusted Advisor
Correct Answer: A
Rationale: AWS Config enables you to assess, audit, and evaluate the
configurations of your resources. It can be used to enforce rules such as
restricting allowed EC2 instance types.
,5. Which of the following best describes an Availability Zone?
A. A single data center in a specific geographic region
B. One or more discrete data centers with redundant power,
networking, and connectivity
C. A global network of edge locations for content delivery
D. A collection of AWS regions spread across the globe
Correct Answer: B
Rationale: An Availability Zone (AZ) is one or more discrete data centers
with independent power, cooling, and physical security. They are
connected via low-latency links to form a Region.
6. What is the primary function of AWS CloudTrail?
A. Monitoring resource performance metrics
B. Tracking user activity and API usage in the AWS account
C. Providing cost estimates for AWS services
D. Automating the deployment of infrastructure
Correct Answer: B
Rationale: AWS CloudTrail records AWS API calls and user activity,
providing an audit trail of who did what, when, and from which IP
address.
7. A company wants to run a web application that scales automatically
based on demand. Which AWS service should they use?
A. AWS Elastic Beanstalk
B. AWS Lambda
C. Amazon EC2 Auto Scaling
D. AWS CloudFormation
Correct Answer: C
Rationale: Amazon EC2 Auto Scaling helps you maintain application
, availability and allows you to automatically scale your EC2 capacity up
or down according to conditions you define.
8. Which of the following is an AWS service used to manage large-
scale, non-relational (NoSQL) databases?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Neptune
Correct Answer: B
Rationale: Amazon DynamoDB is a fully managed NoSQL key-value and
document database that delivers single-digit millisecond performance
at any scale.
9. What is the function of an Internet Gateway (IGW) in a VPC?
A. To connect two VPCs within the same region
B. To allow communication between resources in a VPC and the internet
C. To filter traffic coming into the VPC
D. To enable hybrid cloud connectivity via VPN
Correct Answer: B
Rationale: An Internet Gateway is a horizontally scaled, redundant, and
highly available VPC component that allows communication between
your VPC and the internet.
10. Which AWS service is used to record and monitor AWS account
activity and provides a history of API calls?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS Trusted Advisor
UPDATE: COMPLETE 200-QUESTION EXAM BANK
COVERING EVERY TESTED DOMAIN – INCLUDES
VERIFIED ANSWERS, RANDOMIZED ABCD
DISTRIBUTIONS, AND IN-DEPTH RATIONALES FOR
COMPUTE, STORAGE, NETWORKING, SECURITY, IAM,
BILLING, AND GLOBAL INFRASTRUCTURE.
1. Under the AWS Shared Responsibility Model, which of the following
is a responsibility of the customer?
A. Patching the operating system of an Amazon RDS database instance
B. Securing the physical infrastructure of AWS data centers
C. Managing the underlying hypervisor for Amazon EC2
D. Maintaining network cabling in AWS availability zones
Correct Answer: A
Rationale: The customer is responsible for security "in" the cloud,
including patching the guest OS on EC2 and managing database
schemas, but for RDS, AWS manages the underlying OS and
infrastructure.
2. Which AWS service provides a fully managed, petabyte-scale data
warehouse that allows users to run complex analytical queries?
A. Amazon DynamoDB
B. Amazon Redshift
C. Amazon RDS
D. Amazon Aurora
,Correct Answer: B
Rationale: Amazon Redshift is a fast, fully managed data warehouse
that makes it simple and cost-effective to analyze all your data using
standard SQL and existing ETL, business intelligence, and reporting
tools.
3. Which of the following is a key feature of Amazon S3 that ensures
high durability of stored objects?
A. Automatic cross-region replication
B. Versioning
C. Automatic data replication across multiple Availability Zones
D. Lifecycle policies
Correct Answer: C
Rationale: S3 Standard and S3 Standard-IA automatically store data
redundantly across a minimum of three physically separated Availability
Zones to provide 99.999999999% durability.
4. A company wants to ensure that its AWS resources are always
launched in compliance with company policies (e.g., using only
specific instance types). Which service should they use?
A. AWS Config
B. AWS CloudTrail
C. AWS Service Catalog
D. AWS Trusted Advisor
Correct Answer: A
Rationale: AWS Config enables you to assess, audit, and evaluate the
configurations of your resources. It can be used to enforce rules such as
restricting allowed EC2 instance types.
,5. Which of the following best describes an Availability Zone?
A. A single data center in a specific geographic region
B. One or more discrete data centers with redundant power,
networking, and connectivity
C. A global network of edge locations for content delivery
D. A collection of AWS regions spread across the globe
Correct Answer: B
Rationale: An Availability Zone (AZ) is one or more discrete data centers
with independent power, cooling, and physical security. They are
connected via low-latency links to form a Region.
6. What is the primary function of AWS CloudTrail?
A. Monitoring resource performance metrics
B. Tracking user activity and API usage in the AWS account
C. Providing cost estimates for AWS services
D. Automating the deployment of infrastructure
Correct Answer: B
Rationale: AWS CloudTrail records AWS API calls and user activity,
providing an audit trail of who did what, when, and from which IP
address.
7. A company wants to run a web application that scales automatically
based on demand. Which AWS service should they use?
A. AWS Elastic Beanstalk
B. AWS Lambda
C. Amazon EC2 Auto Scaling
D. AWS CloudFormation
Correct Answer: C
Rationale: Amazon EC2 Auto Scaling helps you maintain application
, availability and allows you to automatically scale your EC2 capacity up
or down according to conditions you define.
8. Which of the following is an AWS service used to manage large-
scale, non-relational (NoSQL) databases?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Neptune
Correct Answer: B
Rationale: Amazon DynamoDB is a fully managed NoSQL key-value and
document database that delivers single-digit millisecond performance
at any scale.
9. What is the function of an Internet Gateway (IGW) in a VPC?
A. To connect two VPCs within the same region
B. To allow communication between resources in a VPC and the internet
C. To filter traffic coming into the VPC
D. To enable hybrid cloud connectivity via VPN
Correct Answer: B
Rationale: An Internet Gateway is a horizontally scaled, redundant, and
highly available VPC component that allows communication between
your VPC and the internet.
10. Which AWS service is used to record and monitor AWS account
activity and provides a history of API calls?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS Trusted Advisor
